templates/grub.cfg


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136

#
# Bootless: evil-maid mitigator.
#

#
# Load environment
#
if [ -s $prefix/grubenv ]; then
  load_env
fi

#
# Basic config
#
set default="0"
set timeout=5

#
# Menu appearance
#
set menu_color_normal=white/blue
set menu_color_highlight=yellow/red

#
# Handles boot from fully encrypted /boot volumes.
# Usage: bootfde <volume> <kernel-version> [source] [target]
#
function bootfde {
  # Loads raid, lvm and luks modules you can access kernel and initrd from
  # the inside your encrypted OS!
  insmod mdraid1x
  insmod lvm
  insmod luks

  set volume=${1}

  if [ "${2}" ]; then
    set version=${2}
  else
    set version=3.16.0-4-amd64
  fi

  if [ "${3}" ]; then
    set source=${3}
  else
    set source=/dev/mapper/${1}
  fi

  if [ "${4}" ]; then
    set target=${4}
  else
    set target=root
  fi

  if [ "${version}" = 'default' ]; then
    set kernel="/vmlinuz"
    set initrd="/initrd.img"
  else
    set kernel="/boot/vmlinuz-${version}"
    set initrd="/boot/initrd.img-${version}"
  fi

  cryptomount lvm/${volume}
  set         root=(crypto0)

  # Load the LVM module again after loading the encrypted volume
  # so Grub can detect LVM volumes inside crypto0.
  rmmod  lvm
  insmod lvm

  echo        "Loading ${volume}..."
  linux       ${kernel} root=/dev/mapper/${target} cryptopts=target=${target},source=${source} ro quiet apparmor=1 security=apparmor
  echo        'Loading initial ramdisk ...'
  initrd      ${initrd}
}

#
# Handles boot from images stored in the USB stick.
# Usage: bootfde <volume> <kernel-version> [target] [rootfs] [distro]
#
function bootimg {
  set volume=${1}

  if [ "${2}" ]; then
    set version=${2}
  else
    set version=3.16.0-4-amd64
  fi

  if [ "${3}" ]; then
    set target=${3}
  else
    set target=root
  fi

  if [ "${4}" ]; then
    set rootfs=${4}
  else
    set rootfs=${target}
  fi

  if [ "${5}" ]; then
    set distro=${5}
  else
    set distro=debian
  fi

  if [ "${version}" = default ]; then
    set kernel="/vmlinuz"
    set initrd="/initrd.img"
  else
    set kernel="/boot/custom/${distro}/vmlinuz-${version}"
    set initrd="/boot/custom/${distro}initrd.img-${version}"
  fi

  echo   "Loading ${1}..."
  linux  ${kernel} root=/dev/mapper/${rootfs} cryptopts=target=${target},source=${volume} ro quiet apparmor=1 security=apparmor
  echo   'Loading initial ramdisk ...'
  initrd ${initrd}
}

#
# Default menu entry
#
menuentry "Memtest86+" {
  linux16 /boot/default/memtest/memtest86+.bin
}

#
# Custom menu entries
#
if [ -e "/boot/custom/custom.cfg" ]; then
  menuentry "Custom configurations" {
    configfile /boot/custom/custom.cfg
  }
fi